Skip to content
OpenAdvisories

Archive

13 July 2005

Vulnerabilities first published on this day (UTC), newest first.

  1. 124
  2. 2 
  3. 3 
  4. 4 
  5. 516
  6. 624
  7. 71
  8. 82
  9. 92
  10. 1075
  11. 1122
  12. 1235
  13. 1328
  14. 14176
  15. 151
  16. 161
  17. 1768
  18. 18 
  19. 1958
  20. 208
  21. 21 
  22. 22 
  23. 23 
  24. 24 
  25. 25 
  26. 2622
  27. 2722
  28. 283
  29. 29 
  30. 30 
  31. 31 

28 results · Feed

  • Unscored —

    Firefox before 1.0.5 allows remote attackers to steal sensitive information by opening a malicious link in the Firefox …

  • Unscored —
    CVE-2005-2256 Public exploit

    Encoded directory traversal vulnerability in phpPgAdmin 3.1 to 3.5.3 allows remote attackers to access arbitrary files …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in PhpAuction 2.5 allow remote attackers to inject arbitrary web sc…

  • Unscored —

    Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to ex…

  • Unscored —

    Opera 7.x and 8 before 8.01 does not clearly associate a Javascript dialog box with the web page that generated it, whi…

  • Unscored —

    Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it,…

  • Unscored —

    Firefox before 1.0.5 and Mozilla before 1.7.9 allows a child frame to call top.focus and other methods in a parent fram…

  • Unscored —

    Safari version 2.0 (412) does not clearly associate a Javascript dialog box with the web page that generated it, which …

  • Unscored —

    The browser user interface in Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 does not properly …

  • Unscored —

    Firefox before 1.0.5, Thunderbird before 1.0.5, Mozilla before 1.7.9, Netscape 8.0.2, and K-Meleon 0.9 runs XBL scripts…

  • Unscored —

    SQL injection vulnerability in PhpAuction 2.5 allow remote attackers to modify SQL queries via the category parameter t…

  • Unscored —
    CVE-2005-2265 Public exploit EPSS 68%

    Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 and 7.2 allows remote attackers to cause a denial of ser…

  • Unscored —

    The saveProfile function in PhpSlash 0.8.0 allows remote attackers to modify arbitrary profiles and gain privileges by …

  • Unscored —

    Multiple unknown vulnerabilities in Jinzora 2.0.1 have unknown impact and attack vectors, possibly involving a PHP file…

  • Unscored —

    PhpAuction 2.5 allows remote attackers to bypass authentication and gain privileges as another user by setting the PHPA…

  • Unscored —

    PHP remote file inclusion vulnerability in photolist.inc.php in Squito Gallery 1.33 allows remote attackers to execute …

  • Unscored —
    CVE-2005-2250 Public exploit EPSS 10%

    Buffer overflow in Bluetooth FTP client (BTFTP) in Nokia Affix 2.1.2 and 3.2.0 allows remote attackers to execute arbit…

  • Unscored —

    Directory traversal vulnerability in PhpAuction 2.5 allows remote attackers to read arbitrary files, include local PHP …

  • Unscored —

    Directory traversal vulnerability in DownloadProtect before 1.0.3 allows remote attackers to read files above the downl…

  • Unscored —
    CVE-2005-2095 Public exploit

    options_identities.php in SquirrelMail 1.4.4 and earlier uses the extract function to process the $_POST variable, whic…

  • Unscored —

    Firefox before 1.0.5 allows remote attackers to steal information and possibly execute arbitrary code by using standalo…

  • Unscored —

    iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote …

  • Unscored —

    PHP remote file inclusion vulnerability in secure.php in PHPSecurePages (phpSP) 0.28beta and earlier allows remote atta…

  • Unscored —

    Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that…

  • Unscored —

    Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM nod…

  • Unscored —

    The InstallTrigger.install method in Firefox before 1.0.5 and Mozilla before 1.7.9 allows remote attackers to execute a…

  • Unscored —
    CVE-2005-2262 Public exploit

    Firefox 1.0.3 and 1.0.4, and Netscape 8.0.2, allows remote attackers to execute arbitrary code by tricking the user int…

  • Unscored —

    The dispallclosed2 function in dispallclosed.pl for multiple USANet Creations products, including (1) USANet Shopping M…